P2150-870 exam

What does QRadar Network Insight (QNI) create?A . An Offense from Events.B . A demilitarized zone from Apple Airport data.C . OSI Layer 7 packet from OSI Layer 3 flow information.D . IPFIX records with deep security content from SPAN or TAN port data.View AnswerAnswer: C

Which attributes would contribute to an effective demonstration of QRadar?A . Bring a whiteboard since prospect might not have one. Show what each tab of the QRadar interface does.B . Show all analysis features on flow data. Focus on the functions that the prospect asked forC . Explain all extension...

cleaning the BGP routing tables regularlyView AnswerAnswer: C

How can assets be used to help in investigations?A . As valuable data sources.B . Make searching for offenses easier.C . Help connect an offense to a device.D . Provide external threat intelligence.View AnswerAnswer: D

What does QRadar Network Insight (QNI) create?A . An Offense from Events.B . A demilitarized zone from Apple Airport data.C . OSI Layer 7 packet from OSI Layer 3 flow information.D . IPFIX records with deep security content from SPAN or TAN port data.View AnswerAnswer: C

Which QRadar Apps integrate with the User Behaviour Analytics App to enhance its detection capabilities?A . QRadar Risk Manager and QRadar Network SecurityB . QRadar Machine Learning App and Reference Data Import - LDAPC . QRadar Asset Profiler App and Palo Alto Networks App for QRadarD . QRadar Incident Remediation...

What are offenses used for?A . To track the time spent investigating incidents by an Analyst.B . To provide incident statistics based on rule group membership.C . To bundle information about a suspicious activity, including events and flows.D . To allow the Historical Correlation engine to check for previous occurrences...

An attacker, who has physical access to the premises, has connected a personal laptop to the network in an attempt to sniff traffic and record any clear text passwords. This scenario would be classified as which type of attack?A . FabricationB . InterceptionC . ModificationD . InterruptionView AnswerAnswer: D

Which types of software appliance are involved of an events is received by an Event Collector, and the event is then to an Event Processor and causes an Offense to be updated on the Console?A . 13xx to 17xx to 31xxB . 13xx to 18xxt o 21xxC . 13xx to...

What does QRadar Network Insight (QNI) create?A . An Offense from Events.B . A demilitarized zone from Apple Airport data.C . OSI Layer 7 packet from OSI Layer 3 flow information.D . IPFIX records with deep security content from SPAN or TAN port data.View AnswerAnswer: C